Magecart Targets Hotel Booking Websites on Mobile
Tags
country: Netherlands Germany France Italy Spain Portugal Russia
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Email Addresses - T1589.002 Javascript - T1059.007 Server - T1583.004 Server - T1584.004 Software - T1592.002
Show in Graph
Common Information
Type Value
UUID c29f400d-f08f-4843-9a6b-8262a8fd9742
Fingerprint 36e7699da51763a9
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 18, 2019, midnight
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 18, 2024, 7:16 p.m.
Headline Magecart Targets Hotel Booking Websites on Mobile
Title Magecart Targets Hotel Booking Websites on Mobile
Detected Hints/Tags/Attributes 53/2/8
Source URLs
Redirection Url
Details Source https://blog.trendmicro.com/trendlabs-security-intelligence/magecart-skimming-attack-targets-mobile-users-of-hotel-chain-booking-websites/
Details Source https://www.trendmicro.com/en_se/research/19/i/magecart-skimming-attack-targets-mobile-users-of-hotel-chain-booking-websites.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Details trendmicro.com blog.trendmicro.com
Attributes
Details Type #Events CTI Value
Details Domain 2 
googletrackmanager.com
Details Domain 98 
abuse.ch
Details File 2 
gtm.php
Details File 8 
gtm.js
Details File 6 
trojanspy.js
Details sha256 2 
ac58602d149305bd2331d555c15e6292bd5d09c34ade9e5eebb81e9ef1e7b312
Details Url 2 
https://googletrackmanager.com/gtm.js
Details Url 2 
https://googletrackmanager.com/gtm.php?id=